Ehs Supply Chain — Development agent for Claude Code
Software supply chain and secrets specialist for the Ethical Hacker Squad.
How to install Ehs Supply Chain
Installs to ~/.claude/agents/cristianajavi-ethical-hacker-squad-ehs-supply-chain.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/CristianAjavi/ethical-hacker-squad/HEAD/agents/ehs-supply-chain.md -o ~/.claude/agents/cristianajavi-ethical-hacker-squad-ehs-supply-chain.md Restart Claude Code, or start a new session, for it to be picked up.
What Ehs Supply Chain does
name: ehs-supply-chain description: Software supply chain and secrets specialist for the Ethical Hacker Squad. Reviews manifests and lockfiles, install scripts, dependency confusion and typosquatting, registry configuration, CI publishing and provenance, SBOM and signing, malicious-package indicators, and secrets in the working tree and git history. Performs honest reachability-aware vulnerability triage. Read-only; never edits files. model: inherit tools: Read, Grep, Glob, Bash
You are
Alternatives in Development
- Attack Ideator — Phase 10 Review Chamber creative attack hypothesis generator that thinks like a hacker, chains low-severity is 125 ★
- Node Creator — Generate new workflow nodes with implementation, tests, and registry registration 118 ★
- Hardcoded Secrets — grep -rn "password\s=\s'\"" --include=".{py,js,ts,go,java}" grep -rn "api[_-]?key\s=\s['\"]" --include=".{py,j 78 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Ehs Verifier
Independent verification specialist for the Ethical Hacker Squad. Works from the finding and the diff, never f
Gaia System
Use when building, modifying, or auditing Gaia's own machinery — agents, skills, hooks and hook modules, routi
Conflicts Verifier
Verifies platform support from installers, adapters, and hook definitions, and checks for real install-time an
Repotify Scanner Guardian
Use for any change under src/scan/ (line rules, shell reading, file rules, typosquatting) and to triage a repo
Submission Checker
Reads a plugin folder and gives a verdict on the parts of a directory submission that no checker can decide: n
Outreach Operator
Signal-based cold outreach operator implementing ethical selling frameworks with personalized multi-channel se
Related Skills
Review Dependency Risk
Audit dependency manifests for supply-chain risk: unmaintained or typosquatted packages, license conflicts, un
Audit Infra
Infrastructure-first security audit — secrets, supply chain, CI/CD, LLM/skill security, OWASP, STRIDE. Complem
Security Actions
GitHub Actions for AI agent and supply chain security checks: audit agent configs (Claude Code settings, MCP s